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TN THE UNITED STATES PATENT AND TRADEMARK OFFICE 



APPLICANT: DULTZ ET AL. 

SERIAL NO.: to be assigned 

FILED: herewith 

TITLE: METHOD AND ARRANGEMENT FOR GENERATING BINARY 

SEQUENCES OF RANDOM NUMBERS 



ART UNIT: 
EXAMINER: 



not yet known 
not yet known 



Assistant Commissioner for Patents 
Washington, D.C. 20231 



Sir: 

PRELIMINARY AMENDMENT 
Please amend the above-identified application before a first consideration on the 
merits as follows: 



IN THE SPECIFICATION 

On page 1, line 1, change "Description" to — Field of the Invention —. 
On page I, line 3, after "arrangement" insert --and method--. 
On page 1, before line 6, insert — Related Technology —. 

On page 3, line 9, after "1994" insert -, which is hereby incorporated by reference 
herein—. 

On page 3, before line 13, insert - Summary of the Invention -. 
On page 3, line 13, change Tthe object" to —An object—. 

On page 3, line 15, change "above. This method should be" to -above, while being- 
and change "the known methods and should be" to -prior methods and--. 
On page 3, delete lines 18-20. 

On page 3, before line 22, insert -The present invention provides a method of 
generating a binary sequence of random numbers based on random selection of a path of 



photons on a beam splitter, the method including emitting photons or photon swarms 
according to a randomness principle using a photon source, the photon source including a low 
power light source; splitting the photons or photon swarms emitted by the photon source 
during a measurement period using at least a first beam splitter and a second beam splitter 
disposed in a beam path of the light source, the second beam splitter being disposed 
downstream of the first beam splitter in a first downstream path of the first beam splitter; 
detecting, in accordance with the splitting, the photons or photon swarms from the splitting 
using a first, a second and a third detector connected to a detection device, the first detector 
being disposed in a second downstream path of the first beam splitter, the second detector 
being disposed in a third downstream path of the second beam splitter, the third detector 
being disposed in a fourth downstream path of the second beam splitter; generating a random 
nximber when the photons or photon swarms detected at the first, second and third detectors 
together correspond to a predefined photon scheme, the photon scheme including generating a 
random number when only one of the second and third detectors registers a detection of the 
photons or photon swarms. 

The present invention also provides an apparatus for generating a binary sequence of random 
numbers, the apparatus including a low power light source including a photon source for 
emitting individual photons and/or photon swarms according to a randomness principle; a 
first and a second beam splitter disposed downstream from the light source in a beam path of 
the light source, the first beam spUtter being disposed between the light source and the second 
beam splitter; a first detector disposed in a downstream path of the first beam splitter; a 
second detector and a third detector disposed in a first and a second downstream path, 
respectively, of the second beam splitter; a detection device for generating the random 
numbers, the detection device being disposed downstream from the first, second and third 
detectors, the detection device including at least one counter and computer.-. 

On page 3, line 22, change "is based on" to —uses—. 

On page 4, line 17, change "The mathematical principles and the possible 
embodiments" to —Embodiments--. 

On page 4, before line 17, insert-Brief Description of the Drawings-. 

On page 4, delete line 17. 
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On page 4, line 18, change "to the present invention are" to -The present invention 
is— and change "Figure" to —the drawing,--. 

On page 4, line 19, change "1." to -in v^hich: 
Figiire 1 shows a schematic representation of an arrangement for generating binary 
sequences. ~ 

On page 4, before line 21, insert - Detailed Description -. 

On page 4, luie 21, change "Light" to -Referring to Figure 1, light-. 

On page 6, line 16, change "used here" to -according to the present invention-. 

One page 7, line 12, change "is" to —are—. 

On page 8, line 8, change "DIq I" to ~Dlo, D2j detectors of the second beam 
splitter—. 

On page 8, delete lines 9-10. 

On page 9, line 1, change "Patent Claims" to -WHAT IS CLAIMED IS:-. 

IN THE CLAIMS 

Please cancel claims 1-10 and add new claims 11-21 as follows: 

-11. (new) A method of generating a binary sequence of random numbers based on 
random selection of a path of photons on a beam splitter, the method comprising: 

emitting photons or photon swarms according to a randomness principle using a 
photon source, the photon source including a low power light source; 

splitting the photons or photon swarms emitted by the photon source during a 
measurement period using at least a first beam splitter and a second beam splitter disposed in 
a beam path of the light source, the second beam splitter being disposed downstream of the 
first beam splitter in a first downstream path of the first beam splitter; 

detecting, ui accordance with the splitting, the photons or photon swarms from the 
splitting using a first, a second and a third detector connected to a detection device, the first 
detector being disposed in a second dovrastream path of the first beam splitter, the second 
detector being disposed in a third downstream path of the second beam splitter, the third 
detector being disposed in a fourth downstream path of the second beam splitter; 



generating a random number when the photons or photon swarms detected at the first, 
second and third detectors together correspond to a predefined photon scheme, the photon 
scheme including generating a random number when only one of the second and third 
detectors registers a detection of the photons or photon swarms. 

12. (new) The method as recited in claim 1 1 wherein the photon scheme includes 
generating a random number when during the measurement period no photon of the photons 
or photon swarms is detected at the first detector and at least one photon of the photons or 
photon swarms is detected at only one of the second and third detectors. 

13. (new) The method as recited in claim 1 1 wherein the photon scheme includes 
generating a random number when during the measurement period at least one photon of the 
photons or photon swarms is detected at the first detector and at least one photon of the 
photons or photon swarms is detected at only one of the second and third detectors. 

14. (new) The method as recited in claim 1 1 wherein the at least a first and second beam 
splitters includes at least a third beam splitter disposed in the beam path between the light 
source and the second beam splitter, each of the at least a third beam splitter including an 
associated fourth detector disposed in a respective downstream path of the associated at least 
a third beam splitter, the photon scheme including generating a random number only when a 
photon swarm of the photons or photon swarms including a number of photons defined by the 
photon scheme is detected at the first, second, third and fourth detectors. 

15. (new) An apparatus for generating a binary sequence of random nxambers, the 
apparatus comprising: 

a low power light source including a photon source for emitting individual photons 
and/or photon swarms according to a randomness principle; 

a first and a second beam splitter disposed downstream from the light source in a 
beam path of the light source, the first beam splitter being disposed between the light source 
and the second beam splitter; 

a first detector disposed in a downstream path of the first beam splitter; 
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a second detector and a third detector disposed in a first and a second downstream 
path, respectively, of the second beam spHtter; 

a detection device for generating the random numbers, the detection device being 
disposed downstream from the first, second and third detectors, the detection device including 
at least one counter and computer. 

1 6. (new) The apparatus as recited in claim 1 5 wherein the first beam splitter includes 
a trigger beam splitter and the first detector includes a trigger detector . 

1 7. (new) The apparatus as recited in claim 1 5 wherein the photon source includes an 
attenuated laser. 

1 8. (new) The apparatus as recited in claim 1 5 wherein the photon source includes a 
thermal light source. 

19. (new) The apparatus as recited in claim 15 wherein the photon source includes a 
spectral lamp. 

20. (new) The apparatus as recited in claim 1 5 wherein the photon source includes a light 
emitting diode. 

21 . (new) The apparatus as recited in claim 1 5 wherein the photon source includes a 
pinched light source.-- 

IN THE ABSTRACT 

Line 1, change "1.1. Method" to —A method--. 
Delete lines 2-6. 

Line 7, change "2.2. This method is based on" to —uses—. 
Delete lines 16-19. 



REMARKS 



This Preliminary Amendment cancels original claims 1-10 in the underlying PCX 
Application No. PCT/EP9 8/0805 7, and adds new claims 11-21. The new claims do not add 
new matter to the application but do conform the claims to U.S. Patent and Trademark Office 
rules. 

The amendments to the specification and abstract are to conform the specification and 
abstract to U.S. Patent and Trademark Office rules and do not introduce new matter into the 
application. 

The imderlying PCT application includes an International Search Report (copy 
included). 



Consideration of the present application as amended is hereby respectfully requested. 



Conclusion 



Respectfully Submitted, 
Kenyon & Kenyon 





Erik R. Swanson 
(Reg. No. 40,833) 



One Broadway 
New York, NY 10004 
(212) 425-7200 
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METHOD AN D ARRANGE M ENT FOR GE NERAJINGBINARY S EQUENC ES__ 
' ~ OFRANDOMNUMBERS 

Description 

The present invention relates to an arrangement for generating binary sequences of 
random numbers. 

5 

Random numbers are used in mathematical simulation of random processes, in 
random sampling and in cryptology in particular. Due to increasing high-bit-rate 
digital communications over publically accessible communication channels, 
guaranteeing the confidentiality and authenticity of the information transmitted has 
10 become a central problem. Good cryptographic codes are sequences of random binary 

numbers. For secure encoding, preferably a random code of this type is selected; this 
code is as long as the message itself and is used only once. 

Essentially two different options are available for generating random niimbers: 

15 

1 . Pseudo-random nxraibers generated by mathematical algorithms 
Essentially, true random numbers cannot be generated by a computer, which operates 
completely deterministically. Therefore, the random numbers generated by 
mathematical algorithms and provided by many programs are never truly random. 
20 Pseudo-random numbers, developed from a shorter, truly random nucleus are an 

improvement. 

In any case, however, a certain number of sequences that are not usable from the 
beginning (weak keys) must be expected in generating pseudo-random numbers by 
25 the methods described above, and in any case, odd correlations must be expected. 



2. Random numbers based on physical methods 



These methods make use of the random character of certain physical processes. 

Even with the physical methods, there are those which are fundamentally 
deterministic, but are so complex that they cannot be reproduced. This would include, 
for example, a coin throw of heads or tails or lotto machines. These methods generate 
a deterministic chaos, which may be considered random because the initial conditions 
of the generator in generating each individual random number are always slightly 
different each time, without this difference being quantifiable. The physical methods 
also include elementary processes, such as those in quantum mechanics. Such 
processes are naturally basically random. Random numbers generated by physical 
processes therefore come closer to the concept of a random sequence than do random 
numbers generated by an algorithm. 

There is a known solution utilizing the natural quantum process of the electromagnetic 
noise of a resistor or a diode to generate random bit sequences (see Mand&ed Richter: 
"Ein Rauschgenerator zur Gewinnung von quasiidealen Zufallszahlen fiir die 
stochastische Simulation" [A noise generator for generating quasi-ideal random 
numbers for stochastic simulation], Dissertation RWTH Aachen; 1992). 

However, such methods can be manipulated externally by superimposing an arbitrary 
predetermined "noise" on the quantum noise, e.g., from incident electromagnetic 
waves. Since it is not easy to separate quantum noise from such an externally 
imposed pseudo-noise, these methods are not considered to be sectore. 

In addition, there are knovm methods of generating random numbers based on 
radioactive decay processes (see Martin Gude: "Ein quasi-idealer 
Gleichverteilungsgenerator basierend auf physikalischen Zufallsphanomenen" [A 
quasi-ideal uniform distribution generator based on physical random phenomena]. 
Dissertation, RWTH Aachen 1987). This method is very suitable for generating 
random sequences because of the high energy of the resulting particles, but in addition 



to the very real risks, due in particular to the potentially harmful effect of radioactive 
radiation on humans, there is also an irrational prejudice against radioactivity on the 
part of some of the population, so that radioactive processes cannot readily be used for 
random generation. 

5 

Another known method of generating random sequences is based on the process of 
selecting the path of individual photons on a beam splitter (see J. G. Rarity et al.: 
"Quantum random-number generation and key sharing" J. Mod. Opt. 41, p. 2435, 
1994). In this method, a light quantum is reflected or transmitted on a 
10 semitransparent mirror, for example; two detectors record the light quantum and their 

displays represent the "0" or "1" of the random sequence. 

The object of the present invention is to provide a method and an arrangement for 
generating binary sequences of random numbers to avoid the disadvantages described 
1 5 above. This method should be less expensive than the known methods and should be 

suitable for integration onto a chip card without any great complexity. 

This object is achieved according to the present invention by the characterizing 
features of Patent Claim 1. Advantageous embodiments and refinements are derived 
20 from the subclaims. 

The method according to the present invention is based on the known principle of 
selecting the path of individual photons on a beam splitter. With the method 
according to the present invention, ultraviolet, visible or infrared light strikes an 
25 optical beam splitter, e.g., a semitransparent mirror. Two detectors which can detect 

individual photons register the photons and define the "0" or the "1" of the random 
sequence via the displays assigned to them and thus define the random sequence itself 

With the method according to the present invention, a photon source of a low power 
30 and thus also small dimension is used as light source L instead of the photon source 



3 



customary in the past, such as an attenuated laser beam source. For example, 
attenuated laser diodes, normal diodes (LEDs), thermal light sources such as halogen 
lamps, spectral lamps or pinched light sources are suitable. In addition, according to 
the present invention, a first beam splitter STl, preferably a trigger beam splitter, is 

5 inserted into the beam path of light source L upstream from second beam splitter ST2. 

The photons/photon swarms emitted during a predefined measurement time by light 
source L according to the random principle are split by beam splitters STl and ST2 
arranged in the beam path of light source L and are detected by detectors (trigger 
detector DT for beam splitter STl and detectors DIq and D2i for beam splitter ST2) 

10 downstream from beam splitters STl and STl according to the split. 

Detectors DT, DIq and D2, are connected to detection unit E. A random number is 
generated only if the photons registered at the individual detectors DT, DIq and D2i 
correspond in their totality to a previously defined photon count scheme which has 
1 5 been input into the computer of the detection unit. 

The mathematical principles and the possible embodiments of the method according 
to the present invention are explained in greater detail below with reference to Figure 
1. 

20 

Light source L has such a weak light intensity that it emits individual photons or it 
always emits photon swarms of n photons with a certain probability. These photon 
swarms are then either resolved in detectors DT, DIq and D2j or counted as a whole as 
a single result. Probability p^ that n photons will arrive at the detector at the same 
25 time or will be counted as a single result is described by a Poisson distribution. 




(1) 



30 n is the average number of photons at the detector per measurement time. Although 

the light source has different statistics if it is thermal light (halogen lamp), chaotic 
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light (spectral line) or laser light, equation (1) applies to all these light sources as long 
as the coherent time of a thermal or chaotic source is short in comparison with the 
measurement time of the detector. Equation (1) always applies to laser light. With a 
simple beam splitter with two detectors, as illustrated by beam splitter ST2 and 

5 detectors DIq and D2i in Figure 1 , the electronics of the counting processes are set up 

so that a result is only ever counted when only one of detectors DIq or D2i responds. 
If both detectors Dig and D2i respond within the measurement time, the counting 
event is discarded. If a swarm of photons is split on beam splitter ST2, the result is 
not used. A counting event is used only if the swarm enters detector Dlo completely 

10 or enters detector D2i completely and is counted. With a swarm of n photons, this 
means that only 2 of n+1 events are covinted, and therefore, equation (1) is to be 
multiplied by to describe the probability with which counting events occur with 

n + 1 

a photon swarm. Therefore, probability p„ that a usable counting event will occur at 
an average photon count h is as follows for the simple beam splitter, corresponding to 
15 beam splitter ST2, and one of the light sources L of a low power described above 

p^^^ = ^^e~" • — ? — simple beam splitter (2) 
" n\ R + 1 

20 

According to the present invention, another beam splitter STl, preferably a trigger 
beam splitter, is connected upstream from simple beam splitter ST2 (Figure 1). As in 
the first case, the electronic counters of both detectors DIq and D2] are connected so 

25 that a random number is determined only when only one or only the other detector 
Dlo or D2i responds. In addition, however, trigger detector DT of beam splitter STl 
must not respond in this case. Transit time effects between trigger detector DT of first 
beam splitter STl and detectors DIq and D2j of second beam splitter ST2 are 
compensated optically or electronically. If there is a swarm of n photons and at least 

30 one photon of the swarm reaches trigger detector DT, the event is not comted. An 

event is counted as (0) or (1) only if no photon goes over first beam splitter STl to 
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trigger detector DT and also if all n photons at second beam splitter ST2 go either 
completely to detector DIq or completely to detector D2^. The probability that no 
photon of the swarm will go to trigger detector DT and the rest will go completely to 
one of detectors DIq or D2i is 4/((n+l)(n+2)), i.e., the probability p^^^^^ that a counting 
event will occur with a swarm of n photons is 

(2) _ n" 4 beam splitter ST2 with 

^" ^1 ^ (« + !)(« +2) beam splitter STl connected upstream 

Equation (3) applies to the case when beam splitter STl has splitting ratio 1/3 : 2/3, 
but beam splitter ST2 has splitting ratio 1/2 : 1/2. In this case, three detectors DT, Dlo 
and D2i are weighted equally. Other splitting ratios are possible, but they alter the 
probabilities according to equation (3). 

The method used here makes it progressively less likely that, with an increasing 
number n of photons emitted during a predefined meas\irement time, an n-photon 
swarm will lead to a covinting event and thus to a random nimiber. However, there is 
an increase in the probability that the ideal case in terms of quantum mechanics will 
occur, namely generation of a random event by a single photon on the beam splitter. 
Multi-photon events, which in the limit case of greater than n go into the conventional 
state, are suppressed. Thus, according to the present invention, weak lasers, chaotic or 
thermal light sources can be used as random generators. 

An arrangement of more than one trigger beam splitter in the beam path between light 
source L and beam splitter ST2 is also conceivable. The trigger detectors of these 
additional trigger beam splitters are also connected to detection device E. In such an 
embodiment, the photons detected during the predefined measurement time are 
registered in the detection device in accordance with their assignment to the individual 
trigger beam splitters (including beam splitter ST2) and are likewise compared with a 
predetermined photon scheme stored in detection device E. In such an embodiment. 



photon swarms are suppressed to an even greater extent. Random events are recorded, 
for example, only when none of the trigger detectors responds. 

Another defined or variable photon scheme may also be selected with an embodiment 
5 having multiple trigger detectors in the beam path of light source L. For example, the 

photon scheme may include the fact that the trigger detector of every second trigger 
beam splitter must respond or that only the trigger detector of the first and seventh 
trigger beam splitter must respond. In each of these cases, the counting probability for 
the photon swarm is reduced. 

10 

An interesting example is an arrangement according to Figure 1, where the random 
events at second beam splitter ST2 are counted only when one or more photons is 
registered by trigger detector DT of beam splitter STl . In this case, swarms with only 
one photon are not used at all for random generation. Since detectors today also have 
1 5 some very unpleasant properties, such as a low quantum efficiency and dead times, 

the trade-in for additional trigger beam splitters is also additional electronic problems 
and higher costs. Thus, in practice, preferably only one additional trigger beam 
splitter is used. 



7 



List of reference notation 



L light source 

STl first beam splitter (trigger beam splitter) 
5 ST2 second beam splitter 

E detection device 

DT trigger detector of the first beam splitter 
Dlo I 

I detectors of the second beam splitter 
10 D2i I 

n number of photons emitted by the Ught source during a defined measurement 
time 
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Patent Claims 



1 . Method of generating binary sequences of random numbers based on the principle 
of random selection of the path of photons on a beam splitter and generating a random 
number by using two detectors downstream from a beam splitter, where the counting 
electronic means of the two detectors are wired so that a random number is generated 
when only one of the detectors responds, characterized in that the photons/photon 
swarms emitted during a defined measurement time by a photon source designed as a 
light source (L) of a low power according to the random principle are split by at least 
two beam splitters (STl; ST2) arranged one after the other in the beam path of the 
light source (L) and are detected by downstream detectors (DT; DIq, D2i) connected 
to the detection device (E) in accordance with the split by the beam splitters (STl, 
ST2), and a random number is generated only if the photons registered at the 
individual detectors (DT; DIq, D2i) correspond in their totality to a previously defined 
photon scheme. 

2. Method according to Claim 1 , characterized in that with two beam splitters (STl, 
ST2) arranged one after the other in the beam path of the light source (L), the photon 
counting scheme on which generation of the random number is based is in turn based 
on generating a random number only when no photon is registered at the trigger 
detector (DT) of the first beam splitter (STl) during the predefined measurement 
period and at least one photon is registered at only one of the detectors (DIq) or (D2i) 
downstream fi-om the second beam splitter (ST2). 

3. Method according to Claim 1, characterized in that with two beam splitters (STl, 
ST2) arranged one after the other in the beam path of the light source, the photon 
counting scheme on which the generation of the random number is based is in turn 
based on generating a random number only when at least one photon is registered on 
the detector (DT) of the first beam splitter (STl) during the predefined measurement 
time and at least one photon is registered at only one of the two detectors (DIq) and 
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(D2i) downstream from the second beam splitter (ST2). 

4. Method according to Claim 1, characterized in that for the case when more than 
two trigger beam splitters are arranged in the beam path between the light source (L) 
and the beam splitter (ST2), the photon scheme is designed mathematically so that a 
random number is generated only when a photon swarm with a number of photons 
defined by the predefined photon scheme appears at the detectors of the beam splitter 
(ST2) and the trigger detectors of the additional trigger beam splitters. 

5. Arrangement for generating binary sequences of random numbers, including 

- a light source designed as a photon source, 

- a beam splitter downstream from the light source and having two detectors 
downstream from the beam splitter, and 

- a detection device downstream from the detectors, including counters and computer, 
for generating the random numbers, 

characterized in that a light source (L) of a low power is used as the photon source 
from which both individual photons as well as photon swarms can be emitted 
according to the random principle, and at least one additional beam splitter, preferably 
a trigger beam splitter (STl), is arranged in the beam path between the light soiirce 
(L) and the beam splitter (ST2) arranged in the beam path of the light source (L), the 
additional beam splitter being connected by a detector, preferably a trigger detector 
(DT), to the detection device (E). 

6. Arrangement according to Claim 5, characterized in that an attenuated laser is used 
as light source (L). 

7. Arrangement according to Claim 5, characterized in that a thermal light source is 
used as light source (L). 

8. Arrangement according to Claim 5, characterized in that an spectral lamp is used as 
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light source (L). 



9. Arrangement according to Claim 5, characterized in that a light emitting diode is 
used as light source (L). 

10. Arrangement according to Claim 4, characterized in that a pinched light source is 
used as light source (L). 
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Abstract of the Disclosure 

1.1. Method and arrangement for generating binary sequences of random numbers 

2.1 . The object is to provide a cost-effective method and an arrangement for 
generating binary sequences of random numbers. The method of achieving this 

5 should be such that integration on a chip card is easily possible. 

2.2. This method is based on the principle of random selection of the path of photons 
on a beam splitter and generating a random number by using two detectors (DIq, D2i) 
downstream from a beam splitter (ST2). To generate photons, a light source (L) of a 

10 low power is used, and an additional beam splitter (STl) is coimected upstream from 

the beam splitter (ST2). The photons emitted by the light source (L) during a 
predefined measurement time are split by the beam splitters (STl, ST2) arranged one 
after the other in the beam path of the light source (L). The random sequence is 
generated when the splitting of the photons matches a predefined photon scheme. 

15 

2.3. This method makes available an inexpensive random generator which can be 
integrated into a chip card easily in particular because of the light source (L) used. 

3.0. Figure 1 
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